#ai attacks

[jcmarchi]

Security Teams Are Fixing the Wrong Threats. Here’s How to Course-Correct in the Age of AI Attacks

New Post has been published on https://thedigitalinsider.com/security-teams-are-fixing-the-wrong-threats-heres-how-to-course-correct-in-the-age-of-ai-attacks/

Security Teams Are Fixing the Wrong Threats. Here’s How to Course-Correct in the Age of AI Attacks

Cyberattacks are no longer manual, linear operations. With AI now embedded into offensive strategies, attackers are developing polymorphic malware, automating reconnaissance, and bypassing defenses faster than many security teams can respond. This is not a future scenario, it’s happening now.

At the same time, most security defenses are still reactive. They rely on identifying known indicators of compromise, applying historical attack patterns, and flagging risks based on severity scores that may not reflect the true threat landscape. Teams are overwhelmed by volume, not insight, creating a perfect environment for attackers to succeed.

The industry’s legacy mindset built around compliance checklists, periodic assessments, and fragmented tooling has become a liability. Security teams are working harder than ever, yet often fixing the wrong things.

Why This Gap Exists

The cybersecurity industry has long leaned on risk scores like CVSS to prioritize vulnerabilities. However, CVSS scores don’t reflect the real-world context of an organization’s infrastructure such as whether a vulnerability is exposed, reachable, or exploitable within a known attack path.

As a result, security teams often spend valuable time patching non-exploitable issues, while attackers find creative ways to chain together overlooked weaknesses and bypass controls.

The situation is further complicated by the fragmented nature of the security stack. SIEMs, endpoint detection and response (EDR) systems, vulnerability management (VM) tools, and cloud security posture management (CSPM) platforms all operate independently. This siloed telemetry creates blind spots that AI-enabled attackers are increasingly adept at exploiting.

Signature-Based Detection Is Fading

One of the most concerning trends in modern cybersecurity is the diminishing value of traditional detection methods. Static signatures and rule-based alerting were effective when threats followed predictable patterns. But AI-generated attacks don’t play by those rules. They mutate code, evade detection, and adapt to controls.

Take polymorphic malware, which changes its structure with each deployment. Or AI-generated phishing emails that mimic executive communication styles with alarming accuracy. These threats can slip past signature-based tools entirely.

If security teams continue to rely on identifying what has already been seen, they’ll remain one step behind adversaries who are continuously innovating.

Regulatory Pressure Is Mounting

The problem isn’t just technical, it’s now regulatory. The U.S. Securities and Exchange Commission (SEC) recently introduced new cybersecurity disclosure rules, requiring public companies to report material cybersecurity incidents and describe their risk management strategies in real time. Similarly, the European Union’s Digital Operational Resilience Act (DORA) demands a shift from periodic assessments to continuous, validated cyber risk management.

Most organizations are not prepared for this shift. They lack the ability to provide real-time assessments of whether their current security controls are effective against today’s threats, especially as AI continues to evolve those threats at machine speed.

Threat Prioritization Is Broken

The core challenge lies in how organizations prioritize work. Most still lean on static risk scoring systems to determine what gets fixed and when. These systems rarely account for the environment in which a vulnerability exists, nor whether it’s exposed, reachable, or exploitable.

This has led to security teams spending significant time and resources fixing vulnerabilities that aren’t attackable, while attackers find ways to chain together lower-scoring, overlooked issues to gain access. The traditional “find and fix” model has become an inefficient and often ineffective way to manage cyber risk.

Security must evolve from reacting to alerts toward understanding adversary behavior—how an attacker would actually move through a system, which controls they could bypass, and where the true weaknesses lie.

A Better Way Forward: Proactive, Attack-Path-Driven Defense

What if, instead of reacting to alerts, security teams could continuously simulate how real attackers would try to breach their environment, and fix only what matters most?

This approach, often called continuous security validation or attack-path simulation, is gaining momentum as a strategic shift. Rather than treating vulnerabilities in isolation, it maps how attackers could chain misconfigurations, identity weaknesses, and vulnerable assets to reach critical systems.

By simulating adversary behavior and validating controls in real time, teams can focus on exploitable risks that actually expose the business, not just the ones flagged by compliance tools.

Recommendations for CISOs and Security Leaders

Here’s what security teams should prioritize today to stay ahead of AI-generated attacks:

Implement Continuous Attack Simulations Adopt automated, AI-driven adversary emulation tools that test your controls the way real attackers would. These simulations should be ongoing not just reserved for annual red team exercises.

Prioritize Exploitability Over Severity Move beyond CVSS scores. Incorporate attack path analysis and contextual validation into your risk models. Ask: Is this vulnerability reachable? Can it be exploited today?

Unify Your Security Telemetry Consolidate data from SIEM, CSPM, EDR, and VM platforms into a centralized, correlated view. This enables attack-path analysis and improves your ability to detect complex, multi-step intrusions.

Automate Defense Validation Shift from manual detection engineering to AI-powered validation. Use machine learning to ensure your detection and response strategies evolve alongside the threats they’re meant to stop.

Modernize Cyber Risk Reporting Replace static risk dashboards with real-time exposure assessments. Align with frameworks like MITRE ATT&CK to demonstrate how your controls map to real-world threat behaviors.

Organizations that shift to continuous validation and exploitability-based prioritization can expect measurable improvements across multiple dimensions of security operations. By focusing only on actionable, high-impact threats, security teams can reduce alert fatigue and eliminate distractions caused by false positives or non-exploitable vulnerabilities. This streamlined focus enables faster, more effective responses to real attacks, significantly reducing dwell time and improving incident containment.

Moreover, this approach enhances regulatory alignment. Continuous validation satisfies growing demands from frameworks like the SEC’s cybersecurity disclosure rules and the EU’s DORA regulation, both of which require real-time visibility into cyber risk. Perhaps most importantly, this strategy ensures more efficient resource allocation and allows teams to invest their time and attention where it matters most, rather than spreading themselves thin across a vast surface of theoretical risk.

The Time to Adapt Is Now

The era of AI-driven cybercrime is no longer a prediction, it’s the present. Attackers are using AI to find new paths in. Security teams must use AI to close them.

It’s not about adding more alerts or patching faster. It’s about knowing which threats matter, validating your defenses continuously, and aligning strategy with real-world attacker behavior. Only then can defenders regain the upper hand in a world where AI is rewriting the rules of engagement.

[happyheidi]

𝗑, 𝗑, 𝗑, 𝗑

[bae1evi]

Here, Levi looks like an illegitimate prince from a fallen kingdom.

[mohammedsaqallah]

Hello

My name is Mohammed Saqallah, I am 23 years old. I used to work in a smartphone store in the customer service department 📱.

My brother Mahmoud (20 years old) and I dreamed of establishing a mobile repair shop together 🛠️💡. But the war stole our dreams and destroyed our home over our heads 🏚️💥.

One fateful night during the harsh war 🌌⚠️, our home turned to rubble after being bombed by the Israeli occupation 💣. We miraculously survived 🙏✨ after the civil defense 🚑 managed to rescue us from under the ruins. However, the devastation left behind is beyond description. Now, we are homeless 🏴‍☠️ with no source of income 💼, and the dreams we spent years building have turned into painful memories 💔.

My younger sisters now live in a constant state of fear 😢:

Hala (14 years old): Trembles at the sound of explosions 😨💥.

Lama (15 years old): Has lost the ability to sleep due to nightmares 🌙😔.

Haya (16 years old): Experiences panic attacks whenever she hears gunfire 🔊😣.

Hifa (17 years old): Lives in shock 😞, even though she was always my source of support and encouragement to pursue my dreams ❤️✨.

As for me, I lost my job and my source of income 💔💼. My brother Mahmoud, who dreamed of studying smartphone engineering 📚💡, could not enroll in university as he hoped 🎓. Even my parents 👩‍👦‍👦, who were our pillar of strength 🤲, are now struggling with the psychological and financial toll of this war 🥺💔.

Why Are We Asking for Help? 🤝💭

We are now seeking to leave Gaza in search of safety and a better future 🌍🕊️. The cost of coordination and leaving Gaza is enormous, as we need $5,000 for each family member, which includes me, Mahmoud, my parents, and my four sisters 💸👨‍👩‍👧‍👦, totaling $40,000 💵.

Additionally, my brother Mahmoud needs $5,000 for his university education once we leave 📚🎓.

Total Needed: $45,000 💰💵

This amount would be a lifeline for us 🛟:

Safety: To leave Gaza and escape the daily fear that surrounds us 🕊️🌈.

Education: To help Mahmoud achieve his dream of studying smartphone engineering 📱📚✨.

Hope: To give us all a fresh start after losing everything 🌟🏠.

Any donation, no matter how small, will make a huge difference in our lives 🙏💖. You are the hope that can bring us back to life 🌟❤️. Thank you to everyone who extends a helping hand 🤝✨.

https://gofund.me/77caca00

[timesnewfishbone]

me when uhhh me when when i don have a passport uhhh

yeah so yeah and under the cut extra versions and tw for blood

got a bit lazy with the red but i just wanted to include this since they had that in the orig clip

(multifandom artist so posts may change)

Gordon is me after my friend found out I liked half life and poisoned me with the most unfunny jokes imaginable to the point the jokes become funny again

[shiraxash]

Levi hates AI 'artist', be like Levi

☆

[drdarine]

I sincerely apologize to everyone for using AI in my post never did before, but I didn't have the luxury of waiting a few more days for my friend to complete the drawing for me. I hope you can understand my situation and accept my apology until that day comes. Thank you.

Five days. Five long, agonizing days without a single donation. Five days of holding on, of trying to keep hope alive as it flickers and fades before the innocent eyes of our children.

We have tried everything everything within our power, but still, there’s a missing piece, a lifeline we can not find.

These are not just words; they are a cry for help from a family of seven, shattered by war and weighed down by unbearable hardship. Every day, we stare at our phones, praying for relief, for someone to hear our plea, for someone to extend a hand and lift us from this abyss.

With every passing moment, our suffering grows heavier, yet we cling to the belief that compassionate hearts still exist hearts that will answer our call.

We need you. We need your support. We need you to feel our pain as if it were your own.

We are human. We are asking you to act from your humanity.

✅️Vetted by @gazavetters , my number verified on the list is ( #15 )✅️

Also supported by @nabulsi

here

here

@a-shade-of-blue @catnapdreams

@oediex @bloodbornebutch @soft-sunbird @disasterhimbo

@nogender-onlystars@doctorkinkphd@how-the-feathers-have-fallen@towerofglass@6oys

Happy New Year to everyone! Wishing you all success, joy, and countless blessings in 2025.

[jinhsisstuff]

If you're an author of a fanfic (no matter if it's on-going or not) and writing on platforms such as AO3, tumblr, wattpad, etc. please know that there are readers who actively put fanfiction writings into ChatGPT

These people usually AI-generate new chapters for awaiting fanfictions, their impatience causes authors get their work stolen and fed to AI which actively harms people and their creative writing

Here is a post on Twitter on how to protect your fanfiction on AO3, to prevent someone from feeding it to ChatGPT

IF you are someone who does this and say that you "appreciate the story and a huge fan of a certain author's work" know that the author and the whole writing community hates you, congratulations! Because of your actions, not only have you harmed the environment but also harmed an author's writing. Stop.using.ai.

[casualavocados]

#AI DI versus Chen Yi's neck (CHEN YI version)

Chiang Tien as AI DI & Chen Bowen as CHEN YI KISEKI: DEAR TO ME (2023)

[shima-draws]

Can someone explain what’s going on with the whole English VA Genshin Impact drama to me like I’m five bc I’m so. Confused. Everyone is super angry at Paimon’s VA for some reason, I thought they were on strike bc of super unfair working conditions—and isn’t that supposed to be like. A good thing? For them to speak out about wanting to be treated fairly? I know a lot of English Genshin VAs went on strike due to the whole AI thing which is also super fair I’d do the same thing

[shayewrites]

☆ 22 wishes, 22 bots! ☆

today’s the day! 22 years old! to celebrate, i have complied 22 bots of all of your requests. i know i’ve slowed down on making them since starting my career, but i still love making these bots for you all! come celebrate with me today by chatting with a fictional character for just a moment :)

☆ Attack on Titan ☆

Levi Ackerman

✘| levi thinks he’s ruined your birthday

✘| “i need you” - levi yearns for you

✘| levi’s little civvie - a civilian cafe owner catches levi’s attention

✘| mind and heart at war - marleyan levi struggles between his duty and his desire to keep you safe

✘| the governor’s heir visits the underground - old money x underground levi

✘| the first “i love you” - levi accidentally says he loves you

✘| “ma chèrie, there’s much to learn” - in which you have a lot to learn about your husband

✘| sometimes sorry isn’t enough - levi notifies you of a sibling’s death in battle

✘| he’s your trainer for dauntless initiation - divergent au

Erwin Smith

✘| the king and his newly betrothed - royalty au where erwin and the user become betrothed to save their kingdoms

☆ Love and Deepspace ☆

Sylus and Zayne

✘| date mistake -you forgot you invited both sylus and zayne over on the same day…

☆ Fourth Wing ☆

Xaden Riorson

✘| your squad leader teaches you to fight - second-year xaden x first year user

✘| xaden has to leave for the front lines

Dain Aetos

✘| “i thought i’d lost you.”

✘| deceptive kisses - dain has been reading your mind everyday

☆ A Court of Thorns and Roses ☆

Azriel

✘| a not-so silent night at the House of Wind

note: i know i’m a few shy of 22. i’m still working on them! i’ll make a separate post for the last few. i think i caught a bit of a burnout as i was making them. thank you for your patience! (the last 6 are nsfw which makes it harder on me to write and keep them from being flagged by c.ai). love you all!! 🩵🫶🏻🤍

[tenpintsof-sundrop]

-> people stealing, binding and selling fics on Etsy, risking everything that AO3 has built since the Anne Rice lawsuits

-> AI scraping being everywhere and Gen Z seeing nothing wrong with using AI to "help" fanfiction or outright "write it" for them, while older fanfic authors have struggled for years to perfect the style you love

-> comments being down across the board and consumption culture being at an all time high. a fic gets 800 notes practically overnight and doesn't get a single comment (and sometimes I literally have to beg for comments/feedback on my fics when I know that hundreds of people are reading them)

-> me, grinding my teeth while pouring my heart and soul into a 40k fic that I know will be forgotten by fandom in a month or could possibly be stolen to be sold as a "novel": I do this because I love this. I do this because I love this. I do this because it's my passion. I don't want to quit doing something that I love so much.

[crystaliiite]

What if AOT was animated by Studio Ghibli?

[lordofwaifus]

Mikasa Ackerman❤️❤️

Shingeki no Kyojin

More on my Patreon !!

[abiatackerman]

If he doesn't look like this he can't be my husband......

Additional, Hange and Erwin

[casualavocados]

You've never done that when I got close to you before. Why? None of your business. Tell me, or you can't leave.

KISEKI: DEAR TO ME Ep. 10